Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c2f40865-61a2-393e-aa95-3a61154334a2.roa
File: c2f40865-61a2-393e-aa95-3a61154334a2.roa (raw, json)
Hash identifier: 2bAKpAMuJDc0jnLa/j+wGhGVxw4I/wR7PC6o8L0Mlf8=
Subject key identifier: DF:AB:8F:EE:52:27:86:E7:16:45:25:1A:83:A1:64:68:B8:88:A0:E4
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584830F5C59071C3D4E5DDEF1480
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c2f40865-61a2-393e-aa95-3a61154334a2.roa
Signing time: Fri 13 Dec 2024 09:00:53 +0000
ROA not before: Fri 13 Dec 2024 09:00:53 +0000
ROA not after: Thu 13 Mar 2025 08:00:53 +0000
asID: 54535
IP address blocks: 146.197.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:f5:c5:90:71:c3:d4:e5:dd:ef:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 09:00:53 2024 GMT
Not After : Mar 13 08:00:53 2025 GMT
Subject: CN=24d508ae-95de-4804-9ad6-8a6e05d73560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:83:d0:d6:e7:f0:d5:6d:91:58:68:29:92:
1f:da:bf:e5:9c:72:bd:6a:3d:1d:51:2c:d4:32:9e:
d5:38:28:1a:44:c3:5f:87:37:e8:4b:6d:06:4d:3a:
c5:f8:65:55:10:54:b6:ed:0f:ff:4a:62:72:2d:34:
68:ba:1a:ae:bb:5d:d2:28:38:52:af:5b:cb:e1:e8:
e2:94:a1:eb:0b:3c:9e:4e:d6:a6:4a:79:b2:ee:cd:
94:cd:7b:a5:68:e8:ab:43:9e:04:75:e1:3d:d5:d8:
c5:16:72:47:48:6a:c9:21:f8:ca:21:ad:c2:42:c6:
2b:2d:60:19:4f:3a:9e:ab:83:6f:e4:e4:a1:f4:35:
72:a3:ee:f3:d8:a3:86:b5:7c:06:44:e4:3d:05:43:
02:0e:6d:72:d1:a6:f6:bb:61:71:39:c6:46:a7:4c:
e4:b5:a9:cc:03:63:d0:31:55:d1:c1:fd:42:c2:c3:
8f:12:9b:74:64:11:30:8a:c9:15:15:3d:e8:e5:ae:
9b:20:5f:ef:ff:8e:18:2a:bf:30:59:4c:ef:88:38:
e7:bf:ca:f0:3c:27:b0:e6:b9:5f:53:41:8c:48:ea:
2e:c2:89:d3:45:bf:12:68:8d:7a:49:b7:fe:d5:1b:
0e:e4:93:ff:b0:88:69:ed:8c:0e:41:9b:c1:d6:24:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:8F:EE:52:27:86:E7:16:45:25:1A:83:A1:64:68:B8:88:A0:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c2f40865-61a2-393e-aa95-3a61154334a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:87:01:86:21:15:85:a7:14:03:52:b7:fb:6b:93:12:dd:5e:
32:59:ff:57:18:6f:8d:4a:8c:f1:9e:71:f5:ae:e7:19:42:66:
8a:18:e3:06:bd:26:45:53:77:55:a0:79:4d:a9:be:14:08:05:
5b:29:f6:3e:bf:9a:de:3b:a1:da:dd:92:e1:04:f2:f4:89:92:
fb:3f:90:ff:94:11:e1:7c:30:dd:50:61:b9:05:d2:c0:dd:1a:
c0:db:34:d8:f4:c2:28:b1:3a:d8:c5:17:2b:91:d7:4b:cd:c2:
4d:dd:e3:ea:cc:21:89:94:40:e6:c2:1f:1c:fc:3f:b7:ff:66:
b9:ad:8f:df:df:7f:30:d1:3c:87:bd:67:33:6c:51:ed:bd:12:
39:cc:9b:9c:28:ec:76:66:8e:d2:fd:fa:fb:e1:7f:48:76:38:
f7:60:d0:04:7b:5b:d5:35:bf:ff:30:33:fb:dc:31:17:1c:c4:
07:13:4b:83:f9:ca:00:fc:39:77:04:b8:3a:be:cf:0e:d6:f9:
0f:d3:8f:67:d1:3a:7e:51:b2:e6:5f:37:54:dd:5c:67:77:0e:
a1:7e:1c:a7:14:ce:07:75:56:19:95:cc:df:0a:c6:16:47:44:
67:a1:ef:a0:46:33:09:28:94:30:a2:f5:5b:f7:ca:47:bb:c6:
47:f1:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:41 2025 by rpki-client